Bug 1929347

Summary:	pulp3: Ensure migration plugin runs in FIPS mode and respects the ALLOWED_CONTENT_CHECKSUMS configuration
Product:	Red Hat Satellite	Reporter:	Tanya Tereshchenko <ttereshc>
Component:	Packaging	Assignee:	satellite6-bugs <satellite6-bugs>
Status:	CLOSED ERRATA	QA Contact:	Peter Ondrejka <pondrejk>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	6.9.0	CC:	ahumbe, bmbouter, egolov, ehelms, ggainey, ipanova, jkrajice, jsherril, lvrtelov, mmccune, osousa, rchan, smallamp, swadeley, ttereshc
Target Milestone:	6.9.9	Keywords:	Triaged
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	python-pulpcore-3.7.8-2	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1973346 (view as bug list)		Environment:
Last Closed:	2022-04-20 20:34:52 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2017489, 2019563
Bug Blocks:

Description Tanya Tereshchenko 2021-02-16 17:35:59 UTC

Description of problem:


Katello needs to run in a FIPS-enabled environment with the migration plugin.

The prerequisite for this task would be pulpcore, pulp_file, pulp_container and pulp_rpm being able to function in the FIPS environment.

Comment 1 pulp-infra@redhat.com 2021-02-16 18:07:05 UTC

The Pulp upstream bug status is at NEW. Updating the external tracker on this bug.

Comment 2 pulp-infra@redhat.com 2021-02-16 18:07:06 UTC

The Pulp upstream bug priority is at Normal. Updating the external tracker on this bug.

Comment 5 pulp-infra@redhat.com 2021-03-16 15:11:28 UTC

The Pulp upstream bug status is at ASSIGNED. Updating the external tracker on this bug.

Comment 7 pulp-infra@redhat.com 2021-04-13 18:23:47 UTC

The Pulp upstream bug status is at CLOSED - COMPLETE. Updating the external tracker on this bug.

Comment 8 pulp-infra@redhat.com 2021-04-13 19:17:05 UTC

All upstream Pulp bugs are at MODIFIED+. Moving this bug to POST.

Comment 10 Tanya Tereshchenko 2021-06-07 11:01:25 UTC

The patches which should be included are specified here: https://hackmd.io/@pulp/Pulp3-FIPS-matrix#What-about-37

Comment 16 pulp-infra@redhat.com 2021-08-11 15:09:47 UTC

Requesting needsinfo from upstream developer ggainey because the 'FailedQA' flag is set.

Comment 19 Tanya Tereshchenko 2021-08-26 17:33:25 UTC

*** Bug 1995524 has been marked as a duplicate of this bug. ***

Comment 22 Lai 2021-10-26 15:42:41 UTC

Failing this.  Please look at https://bugzilla.redhat.com/show_bug.cgi?id=2017489 as to why and reproducer.

Comment 23 Brad Buckingham 2021-10-29 14:47:31 UTC

Bug 2017489 referenced in comment 22 is now MODIFIED.

Under the assumption that including that fix should result in this bugzilla going ON_QA for verification, I am going to move this one to ON_DEV.  That will trigger this bugzilla to go ON_QA at the same time as bug 2017489.

Comment 24 Lai 2021-11-02 20:31:28 UTC

Failing QE.  Please check https://bugzilla.redhat.com/show_bug.cgi?id=2019563 for more info.

Comment 28 Peter Ondrejka 2022-03-28 13:19:10 UTC

Verified on Satellite 6.9.9 snap 2 on fips-enabled rhel7 -- content is migrated successfully

Comment 34 errata-xmlrpc 2022-04-20 20:34:52 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Satellite 6.9.9 Async Bug Fix Update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:1478